Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HINET/axc6DhLJuJ0jLVbKf_idLdJYm1Y.roa
File: axc6DhLJuJ0jLVbKf_idLdJYm1Y.roa (raw, json)
Hash identifier: 8uXrS+dc0G4YvD13W9ZlLFRV8JixOC9JO7eS2Y4DhEA=
Subject key identifier: 6B:17:3A:0E:12:C9:B8:9D:23:2D:56:CA:7F:F8:9D:2D:D2:58:9B:56
Certificate issuer: /CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Certificate serial: 0810
Authority key identifier: C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/axc6DhLJuJ0jLVbKf_idLdJYm1Y.roa
Signing time: Tue 29 Sep 2020 09:58:17 +0000
ROA not before: Tue 29 Sep 2020 09:58:17 +0000
ROA not after: Wed 29 Sep 2021 09:51:23 +0000
asID: 3462
IP address blocks: 36.224.0.0/12 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2064 (0x810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E7B6F951B112F9106A96FE7F8774EAE802509
Validity
Not Before: Sep 29 09:58:17 2020 GMT
Not After : Sep 29 09:51:23 2021 GMT
Subject: CN=6B173A0E12C9B89D232D56CA7FF89D2DD2589B56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:73:8b:73:41:ea:50:e3:91:c0:59:b6:4a:b1:
df:e1:43:43:e5:74:9a:7a:04:92:07:6d:68:4e:4d:
48:bf:fb:2e:4c:c3:a9:9a:29:3e:aa:8d:db:0a:ef:
da:2c:c7:1e:dc:7d:1e:df:0e:3e:12:5c:3a:bc:f0:
56:9a:d3:b0:bd:47:ee:d6:a3:91:ef:5b:43:7c:27:
45:b8:8b:66:86:b7:9e:ae:b7:e3:b9:ce:1f:8d:7e:
94:b8:4d:3b:ec:15:e6:bb:81:c1:da:18:d5:62:d6:
28:a1:f2:bf:f4:83:e7:aa:26:45:b2:32:54:5e:4c:
05:e6:07:90:4e:60:2c:33:00:92:fa:0f:3d:a7:13:
f5:b4:a6:16:04:89:5a:a7:86:d3:a7:e7:e0:7f:28:
66:51:a1:46:d1:60:05:f9:e0:bd:9f:fd:7d:ab:6b:
21:55:2f:b1:71:ca:8a:61:6c:b6:0b:c2:78:d6:dc:
49:aa:73:93:7e:aa:bf:e9:6f:71:8d:29:c5:27:c1:
4e:16:1b:2c:0d:c5:33:20:1d:53:be:2e:cd:bc:8e:
4c:84:97:26:29:bc:d7:22:6d:1e:6f:c9:6d:16:6f:
fa:26:30:29:93:d3:fc:5f:57:ca:33:31:4f:96:15:
84:01:94:c4:94:7e:cf:3c:21:c1:c7:fc:6c:6e:4c:
17:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:17:3A:0E:12:C9:B8:9D:23:2D:56:CA:7F:F8:9D:2D:D2:58:9B:56
X509v3 Authority Key Identifier:
keyid:C4:9E:7B:6F:95:1B:11:2F:91:06:A9:6F:E7:F8:77:4E:AE:80:25:09
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/xJ57b5UbES-RBqlv5_h3Tq6AJQk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/xJ57b5UbES-RBqlv5_h3Tq6AJQk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HINET/axc6DhLJuJ0jLVbKf_idLdJYm1Y.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
36.224.0.0/12
Signature Algorithm: sha256WithRSAEncryption
17:75:4d:b6:fd:41:4e:d9:df:95:51:ca:97:8d:39:33:2d:17:
c7:89:d2:20:04:f6:7f:d3:4e:d7:5d:fc:71:84:f4:03:ff:aa:
c2:d6:9a:6f:74:7b:34:e4:9f:f0:22:d1:2b:54:69:0f:fe:75:
df:50:a5:a1:d2:f3:e3:27:66:d2:d0:55:a6:ca:4f:5b:85:53:
c2:31:df:c6:8c:e8:e3:b2:42:24:ee:38:0e:f7:81:df:ae:4d:
13:fd:5f:a5:20:b1:08:8c:96:e7:b0:c4:34:ed:4b:dc:58:6b:
9f:58:09:5e:8b:d5:28:e9:7b:97:0f:95:ae:dd:02:62:3a:e4:
d4:4c:3e:35:b4:b1:50:ed:33:af:58:b8:cc:a3:97:f1:90:9f:
c1:7f:e1:bb:1f:80:26:54:0e:d0:84:4c:84:10:be:f7:ad:24:
12:e3:80:c4:c2:f3:1a:c2:1b:c8:d4:ca:99:13:9a:9d:63:5b:
fe:b7:09:fc:fe:f0:df:90:ee:01:30:7c:ea:16:c2:32:7f:18:
6e:02:ef:fa:86:a9:86:14:2e:5f:8f:3a:44:76:e1:a2:9a:c5:
27:79:7a:07:81:35:c2:78:fa:7e:ac:de:91:d5:ed:5b:bc:8e:
f7:88:4a:5f:12:a4:1a:03:bb:53:d6:df:be:b2:67:0e:a2:55:
dc:56:5c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:00:08 2024 by rpki-client on console-ams.rpki-client.org